SUSE-SU-2024:1948-1

Details

This update for python-Jinja2 fixes the following issues:

CVE-2024-34064: Fixed HTML attribute injection when passing user input as keys to xmlattr filter (bsc#1223980)

Affected Packages

python-Jinja2

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Manager Client Tools 12

Fixed in:

2.8-19.26.1

python3-Jinja2

SUSE Linux Enterprise Module for Advanced Systems Management 12SUSE Linux Enterprise Module for Public Cloud 12SUSE Manager Client Tools 12

Fixed in:

2.8-19.26.1

References